CVE-2026-14151: Inappropriate implementation in AI in Google Chrome prior to 150

Synopsis

A sandbox escape vulnerability exists in the AI subsystem of Google Chrome versions prior to 150.0.7871.47. An attacker who has already compromised the Chrome renderer process can exploit this flaw remotely by serving a crafted HTML page to a victim, breaking out of the browser sandbox and gaining capabilities outside the normally isolated rendering environment. Successful exploitation gives the attacker high-impact read, write, and denial-of-service control over confidential data, application integrity, and service availability. A patched-image rebuild at version 150.0.7871.47 is available on HarborGuard for affected environments.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker must reach the victim over the network by delivering a crafted HTML page, making internet or intranet exposure to untrusted content a prerequisite.

• AuthenticationNot required

  No authentication is needed; the attacker only needs the victim to load a malicious page, with no account or credential barrier in place.

• Victim interactionRequired

  The victim must visit or be directed to a crafted HTML page, meaning some degree of social engineering or link delivery is required to trigger the exploit.

• Attack complexityDetail

  Attack complexity is low, meaning the exploit is reliable and does not depend on race conditions, specific memory layouts, or other unpredictable environmental factors, provided the renderer process has already been compromised.

Blast Radius

• Attacker breaks out of the Chrome browser sandbox, gaining execution capabilities in the host process context beyond the isolated renderer.
• Confidential data accessible to the browser process, including stored credentials, session tokens, and local files, becomes readable by the attacker.
• The attacker can modify application state or persisted data reachable from the escaped sandbox context, including browser profile data and locally cached content.
• The attacker can crash or destabilize the affected service, causing denial of availability for the browser instance and dependent workloads.